“( XOUTING AND RECORD SHEE(, 


SUBJECT: (Optional) 


.. APEX Industrial Security Manual 
FROM: Logistics & Frocurement Law Div SENSON 
Office of Ger rral Counsel 


11 April 1979 


. TO: (Officer designation, room number, and pee DATE . _ 
building) ; a OFFICER'S | COMMENTS (Number eoch commant to show from whom 
cae Ee get Ee | eeceweo | INITIALS to whom. Draw o line across column after each comment.) |. 
: ne Hh a peta es RECZIVED | FORWARDED . oie 
5 . 


A] st 


1-3: Though late, CGC comments | 
regarding the APSX Industrial Z_ 
Security Manual-are not unlike . 
what we have heard from other 

' components especially with re- 
gard to the lack of specificity. 
You may wish to review quickly 
for your information, 
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MEMORANDUM FOR: eee | 
ember, Industrial Security 


Manual Working Group 


. FROM: Logistics & Procurement Law Division 
Office of General Counsel 


SUBJECT: APEX Industrial Security Manual[ _| 


1. Per your request we have reviewed the proposed APEX 
Industrial Security Manual. In addition to notations made in 
. the Manual draft, our comments follow: 


‘a. Page 1 - The citations to the National 
Security Act of 1947 and Executive Orders 12036 
and 12065 are informal and should be placed in | 
proper form. The correct citations are as 
follows: National Security Act of 1947, Pub. L. 
No. 80-253, 61 Stat. 495, as amended; Executive 
‘Order No. 12036, 43 Fed. Reg. 3674 (1978); 
Executive Order No. 12065, 43 Fed. Reg. 28949 
(1978). 


b. Page 1 - We are puzzled as to the exact 
status this Manual will have since it "will serve 
as the authorative guide," while, at the same 
time, the guide, "is not, however, intended to 
intrude on the authority of government Program 
Managers who-will continue to prescribe basic 
operational direction, classification guidance 
and policy on dissemination for programs under 
their cognizance." Exactly what authority or 
weight will this guide convey? 


e. Page 2 - It is unclear to this Office 
whether the "personal responsibility" referred to 
here is meant to infer legal liability or merely 
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the moral restraint placed upon these individuals 
to safeguard this information. If legal liability 
is the intent, this section should be carefully 
coordinated with this Office prior to publication 
of the Manual. 


d. Page 9, paragraph 3 - Time limits shoulda ~ 
be added as to when tracers will be sent. 


e. Page 10, paragraph 5 — The paragraph 
fails to state who will receive the reindoctrina-— 
tions. Clarification is required here. | 


f. Page 11, paragraph 8 - The term "required 
reports" is vague and gives no real clue as to what 
reports are required and by whom. 


&. Page 13, last paragraph - "Common sense 
determinations" is a vague term to be using in so 
sensitive an area as in the granting of exceptions 
for access privileges. 


h. Page 14, paragraph ec - Who will conduct 
these investigations? Also, the phrase, "but not 
limited to," should be added between the words 

‘ "include" and "birth" so as to not make the list an 
exclusive listing. 


i. Page 18, paragraph 12 ~ The spouse or 
immediate family check discussed here must be examined 
by Wee Office of General Counsel, to | 
determine if it complies with current law. A copy of 
the Manual draft has been provided to him for comment. 


Jes Page 23, paragraph e2. — Same comment as 
above in paragraph i. 


k. Page 26 —~ We are unclear as to how this 
Manual interfaces with the newly issued Industrial 
Security Manual of the Office of Security. Willa 
copy of this Manual be provided a contractor or 
potential bidder? Problems in the past have occurred 
regarding enforcement of security practices when it 
was learned that the contractor was not given a copy 
of the particular manual involved. 
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1. Page 27, line 7 - In the phrase, "cognizant 
Agency review," does Agency refer to the CIA? If so, 
will other Intelligence Community members be required 
to accept the CIA review? How will an increase in 
foreign ownership above the five percent mark be 
discovered? ; 


m. Page 28, line 12 - Should read "or" vice "of." 


n. Page 32, paragraph a - Appendix A was not 
provided. , 


Oo. Page 32, paragraph c ~ Periodic is too vague. 
Be specific in order to be enforceable. : 


p. Page 35, line 1 - "May be" is permissive. 
Suggest "must" be substituted. 


q. Page 35, line 11 - The acronym "ACF" is 
undefined. 


r. Page 36, paragraph a, line 2 - Phrase "as 
soon as possible" is vague. Suggest a minimum time be. 
established in order to be enforceable. 


8. Page 36, paragraph a, line 5 - "As a mimimum" 
added to permit reinspections as needed without raising 
claim of interference. Sentence would read "Reinspec— — 
tions are to be conducted every 18 months as a minimum." 


t. Page 38, paragraph a - Delete "sole" as two 
different persons are empowered to certify. 


. u. Page 38, paragraph c - Who will provide the 
necessary support to maintain a Central Access Approval 
Registry? 


v. Page 42, paragraph c — Who will exercise final 
review and resolve these challenges? 


w. Page 49, paragraph f - Delete "As soon as 
possible" as such language is precatory. Suggest a 
time limit be defined to make it enforceable. 
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x. Page 56, paragraph a, line 9 - Delete "in 
timely fashion" as it is precatory. Establish a 
. time limit. 


2. If you require clarification of the above comments 


or wish further review of the_Manual by this Office, please do 
not hesitate to contact us. 


Att. 
Manual 


25X1 ee: [ Special Asst., OGC 
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OLD MANUAL 
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rhe may be waived. sa yithout, prior vettten approval of 
ai 
6 Ba yt 
ae the contracting Officer's Security Representh= o 


ree even. enor ency' telé honis watvers such as 


‘to meet unforedeen Contractor Courier require- 


‘ments under the Two Person Huis: ‘ghalt later be. 


Le seit 


“BS, Preetrt! and writen Cust ner Fevalldas 


“Eton (3ee alno aragraph 103 a. vaiver rovie. 


S ae sions.) + Contractor deviations fron the provi~ 

ie sions of this Manual which do not_have written 
* Gustomer AppYlyal, will be considered in the” - 
ae i & 


ea Customer! 8 aseessment of ‘contract Performance 


durin, contract 


, Tats paragraph has been added: 


a) Andure that Headquarters is kept aware o : 
and has approved arly Ge \teeion fron the 
provisions of the Manual. The "sunset 


+ Clause" is included at the request of the 


". DD/PTOS. Paragraph 10. d. in the new Manual 
8 discusses waivers for open storage, and 
points out that they are time-limited too. 


The sentence concerning possible sanctions 


. during award fee determinations 1s our 
. approach to putting some teeth into con- 


< tractual security requirements. 


a 
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beam TOLATION. Any ecaan cae acute 


~ rity requlattoie, requirements, procedures or - 


. + guides by an. individual vhich subjects classie 
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' ‘ffed or seantbive material or information to 
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compromise to unauthorized persons, or which 
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laces it in go ardy where a com romise could 


” result, condtitutes a security Anetta: Such _ 
$ 


ia breach includes both acts ‘of ontagton such as 


- * fadlure to projerty secure classified or sensi~ 


. tive material ,jend acts of commission such as 


discussion Lis plassities or sensitive informa-. 
“ton over nonsecure telephone etreulte. The: 


“Anformation and materials referred to. in this 


- definition comprise classified materials and 
“those material and anromation which are 
- sensitive because they duveive intelligence 


"sources and methods. 
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jhe eats Lishéd,” and: folloveu action: 


ctnitdated ‘by, “the” originator it” “the” 


tay ned” recet its. not” received within. that time. 


AR see choneelan eet enemas 


In additions the Contractor shett ensure that 


‘ “any classified documents or mabeydal: which he 
' receives oithien a the Custoner or from 


_ another custotier Cinieaaten or gubcontractor are 


a receipted for dmmediately, and that the receipt 
: ap 


; 4s returned. Ltd the sender xishdn 20 workin 


Oo on meee meee 


of é11" reced ta“fory : 


a, Manual consistent with the[__]Manval, 


, This paragraph has been added to make 


py including the 20 vorking days! suspense 


requirement for document and materials 


tracer action. 


-Destruction of classified documents and ooo al 


action is contrary to local ordinances or would ee 


involve safety hazards, advice should be 
. Fequested from the Contracting Officer's 


curity Representative. Destruction may de 


eet 


performed only by persons holding appropriate 
Industrial Security Approvals granted by the 
Agency. Although certificates of destruction 
“are not required, the date and initials of the 
destroyer mst be noted in the log when CONFI~ 
DENTIAL or SECRET documents are destroyed. ‘Two. 


Signatures are required in the log to certify 


“tee destruction of TOP SECRET material. 


Cena 


to local ordi{pances or would involve safety 


a hazards, 


- als Branked hy. the Customer. 


fra “the roast When such n actfon ‘ts ‘contrary 


Vibe entered into the Document Control Log. 


advice should be requested from the 


x Destruction may be performed onty by persons 


holding appropriate Industrial Security Approve» 
Ay bhough certifi+ 


” cates of destyiction are not required, the date 


“and si natures of the destroyen and a witness to 


ee the destruction are required in the log to 
 gertify the. destruction of CONFIDENTIAL, 


SECRET, and: 0 SEORER material, 
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This paragraph has Deen expanded to 


. equire that the destruction of el eclassi-~ 
fied materials be witnessed and that the 


"* signatures of the destroyer and the witness 


ae We ‘have also added the requirement that the 


‘Contracting officer's Security Representative, ‘7 “persons pereOraina the destruction remain at 


the site as specified. 


cee complete and” 8. determination hag “been made that | 
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where the Contractor it an encrypted communica= 
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